Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/qSaiJw0z0UOR7Y1B256ezOohSvo.roa
File: qSaiJw0z0UOR7Y1B256ezOohSvo.roa (raw, json)
Hash identifier: dkj6kc6piJ7VCd7e4XRSJlvSC4H3ZTyg1mpeQ+j6V5s=
Subject key identifier: A9:26:A2:27:0D:33:D1:43:91:ED:8D:41:DB:9E:9E:CC:EA:21:4A:FA
Certificate issuer: /CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Certificate serial: 03246E
Authority key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/qSaiJw0z0UOR7Y1B256ezOohSvo.roa
Signing time: Mon 14 Mar 2022 20:46:06 +0000
ROA not before: Mon 14 Mar 2022 20:46:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41730
IP address blocks: 193.201.240.0/24 maxlen: 24
193.201.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205934 (0x3246e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Validity
Not Before: Mar 14 20:46:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a926a2270d33d14391ed8d41db9e9eccea214afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:46:b1:a3:89:29:aa:3e:6b:f6:64:db:52:06:
e8:9e:b0:1e:1f:52:9c:f0:38:74:a0:98:26:71:44:
35:c0:88:74:24:b1:cd:3f:58:cb:39:61:2e:b2:ba:
06:91:44:d5:75:cb:ed:cb:92:04:1e:9e:e5:6a:94:
bf:fc:61:8b:72:c4:db:7d:b5:58:18:e4:49:27:35:
7c:09:e0:4d:9b:24:df:e3:4e:1e:fa:69:f4:1a:48:
5c:aa:12:cd:2e:39:81:33:83:1a:46:bc:d4:4c:3b:
b7:6f:19:51:19:30:8e:c1:3a:e5:ac:c2:ea:75:25:
a5:7d:e4:f1:69:49:3a:04:e9:e4:70:bb:da:ec:23:
27:57:e7:ad:a6:fa:ff:b6:8a:6c:98:c8:dc:38:b7:
4b:4d:71:95:0e:f4:3a:31:0b:7f:66:72:86:51:46:
a4:43:0e:3d:21:64:37:db:3f:a4:f6:d6:48:03:3b:
71:8c:5e:94:25:73:df:da:67:04:c4:68:d2:af:19:
6f:b9:ae:ea:48:9a:71:1e:d5:d1:a3:b5:27:85:3c:
02:3d:37:44:86:ea:e0:cf:22:b0:71:c1:6e:15:7f:
12:e7:21:5a:6e:62:5c:3e:df:be:9e:92:8d:f6:76:
3e:01:32:47:b5:23:97:6d:c6:59:b9:03:e4:c2:05:
ff:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:26:A2:27:0D:33:D1:43:91:ED:8D:41:DB:9E:9E:CC:EA:21:4A:FA
X509v3 Authority Key Identifier:
keyid:5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/qSaiJw0z0UOR7Y1B256ezOohSvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.240.0/23
Signature Algorithm: sha256WithRSAEncryption
96:02:c7:e9:57:53:08:d9:a2:7c:04:a6:9e:9c:3c:24:4e:3d:
80:4d:ff:be:82:ea:fa:f8:8f:58:98:d9:ca:e0:26:26:70:90:
e6:18:8c:73:6c:cf:db:42:20:f2:ea:44:87:07:c3:85:9b:1f:
f8:4a:cf:71:45:99:84:1d:ae:07:70:40:47:96:5c:0e:52:ea:
52:ca:f1:a0:50:3c:1f:e8:8f:30:92:e4:60:8f:5c:7c:a8:10:
e2:44:6f:7b:6f:66:41:26:18:9f:24:5d:4f:2b:00:e7:33:ce:
94:ed:bc:a6:ba:9e:3f:dc:dd:f8:19:04:57:5c:ff:3e:ce:35:
c4:61:00:21:be:3c:82:91:9e:4a:d8:57:1c:5e:4e:d5:e7:03:
33:4a:8f:a6:60:4a:48:38:fd:8a:ab:d8:b3:bb:ad:ff:ca:dc:
b8:eb:8c:fb:e7:93:19:72:61:a4:bc:cd:0c:8e:f8:84:65:11:
01:96:4d:88:fb:28:b8:e7:71:a0:f0:a8:eb:4d:47:e3:86:ba:
db:25:dc:6c:80:2e:d7:aa:76:fd:d5:f9:2a:33:19:c6:32:ea:
ef:e1:21:26:ba:db:ce:de:97:dd:12:2b:70:b0:3e:3d:fe:c2:
ef:5b:a1:5d:46:a3:76:b5:03:e0:a9:38:21:ef:a7:60:00:74:
39:4c:59:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:22 2024 by rpki-client on console-ams.rpki-client.org